StageTracker 2.5 - Denial of Service

Exploit Title: StageTracker 2 Local POC Date: 04.01.2011 Author: freakout Version: 2.5 Tested on: Windows XP SP3 Type: DOS/POC Greetings: anco, mahjong, puddy, st!x, war10ck, fraggle, DarthShredder, ph3n0m, starslayer, db, lufthansen E-Mail: [email protected]...

www.eVuln.com : "id" SQL Injection in WikLink

www.eVuln.com advisory: "id" SQL Injection in WikLink Summary: http://evuln.com/vulns/171/summary.html Details: http://evuln.com/vulns/171/description.html -----------Summary----------- eVuln ID: EV0171 Software: WikLink Vendor: n/a Version: 0.1.3 Critical Level: medium Type: SQL Injection Status...

XSRF (CSRF) in PHP MicroCMS

Vulnerability ID: HTB22765 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinphpmicrocms.html Product: PHP MicroCMS Vendor: ApPHP http://www.apphp.com/ Vulnerable Version: 1.0.1 and probably prior versions Vendor Notification: 21 December 2010 Vulnerability Type: CSRF Cross-Site Request Forger...

XSS vulnerability in F3Site

Vulnerability ID: HTB22756 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinf3site1.html Product: F3Site Vendor: COMPMaster http://dhost.info/compmaster/ Vulnerable Version: 2011 alfa 1 and probably prior versions Vendor Notification: 21 December 2010 Vulnerability Type: Stored XSS...

PHP MicroCMS 1.0.1 Cross Site Request Forgery / Cross Site Scripting

================================== Vulnerability ID: HTB22765 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinphpmicrocms.html Product: PHP MicroCMS Vendor: ApPHP http://www.apphp.com/ Vulnerable Version: 1.0.1 and probably prior versions Vendor Notification: 21 December 2010 Vulnerability...

WonderCMS 0.3.3 Cross Site Scripting

Vulnerability ID: HTB22759 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinwondercms.html Product: WonderCMS Vendor: Robert Isoski http://krneky.com/en/wondercms Vulnerable Version: 0.3.3 and probably prior versions Vendor Notification: 21 December 2010 Vulnerability Type: XSS Cross...

Phenotype CMS 3.0 SQL Injection

Vulnerability ID: HTB22769 Reference: http://www.htbridge.ch/advisory/sqlinjectioninphenotypecms.html Product: Phenotype CMS Vendor: http://www.phenotype-cms.com http://www.phenotype-cms.com Vulnerable Version: 3.0 Vendor Notification: 21 December 2010 Vulnerability Type: SQL Injection Status: No...

F3Site 2011 Alfa 1 Cross Site Request Forgery / Cross Site Scripting

======================================= Vulnerability ID: HTB22757 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinf3site.html Product: F3Site Vendor: COMPMaster http://dhost.info/compmaster/ Vulnerable Version: 2011 alfa 1 and probably prior versions Vendor Notification: 21 December 2010...

PHP MicroCMS 1.0.1 - Cross-Site Request Forgery Cross-Site Scripting

PHP MicroCMS 1.0.1 - Cross-Site Request Forgery Cross-Site Scripting Vulnerability ID: HTB22765 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinphpmicrocms.html Product: PHP MicroCMS Vendor: ApPHP http://www.apphp.com/ Vulnerable Version: 1.0.1 and probably prior versions Vendor Notification...

F3Site 2011 alfa 1 - Cross-Site Scripting Cross-Site Request Forgery

F3Site 2011 alfa 1 - Cross-Site Scripting Cross-Site Request Forgery Vulnerability ID: HTB22757 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinf3site.html Product: F3Site Vendor: COMPMaster http://dhost.info/compmaster/ Vulnerable Version: 2011 alfa 1 and probably prior versions Vendor...

Concrete CMS 5.4.1.1 - Cross-Site Scripting / Remote Code Execution

!/usr/bin/python Concrete CMS v5.4.1.1 xss/remote code execution exploit Download: http://www.concrete5.org/ Special Zeitgeist pre release - "Moving Forward" - 15th Jan 2011 "They must find it difficult, those who take authority as the truth instead of truth as the authority"...

WikLink 0.1.3 SQL Injection

www.eVuln.com advisory: "id" SQL Injection in WikLink Summary: http://evuln.com/vulns/171/summary.html Details: http://evuln.com/vulns/171/description.html -----------Summary----------- eVuln ID: EV0171 Software: WikLink Vendor: n/a Version: 0.1.3 Critical Level: medium Type: SQL Injection Status...

StageTracker 2.5 Denial of Service Vulnerability

Exploit for windows platform in category dos / poc Exploit Title: StageTracker 2 Local POC Date: 04.01.2011 Author: freakout Version: 2.5 Tested on: Windows XP SP3 Type: DOS/POC Greetings: anco, mahjong, puddy, st!x, war10ck, fraggle, DarthShredder, ph3n0m, starslayer, db, lufthansen E-Mail:...

StageTracker 2.5 Denial Of Service

Exploit Title: StageTracker 2 Local POC Date: 04.01.2011 Author: freakout Version: 2.5 Tested on: Windows XP SP3 Type: DOS/POC Greetings: anco, mahjong, puddy, st!x, war10ck, fraggle, DarthShredder, ph3n0m, starslayer, db, lufthansen E-Mail: [email protected]...

Wireshark ENTTEC DMX Data RLE Buffer Overflow Vulnerability

Exploit for multiple platform in category dos / poc !/usr/bin/env python Wireshark ENTTEC DMX Data UDP Buffer Overflow PoC by non-customers crew in 2010 http://rock-madrid.com/ import socket, sys try: host = sys.argv1 except: print "usage: " + sys.argv0 + " " sys.exit2 port = 3333 addr = host, po...

LFI in LightNEasy

Vulnerability ID: HTB22752 Reference: http://www.htbridge.ch/advisory/lfiinlightneasy.html Product: LightNEasy Vendor: Fernando Baptista http://www.lightneasy.org/ Vulnerable Version: 3.2.2 Vendor Notification: 15 December 2010 Vulnerability Type: LFI Status: Not Fixed, Vendor Alerted, Awaiting...

Wireshark - ENTTEC DMX Data RLE Buffer Overflow

Wireshark - ENTTEC DMX Data RLE Buffer Overflow source: https://www.securityfocus.com/bid/45634/info !/usr/bin/env python Wireshark ENTTEC DMX Data UDP Buffer Overflow PoC by non-customers crew in 2010 http://rock-madrid.com/ import socket, sys try: host = sys.argv1 except: print "usage: " +...

CA ARCserve D2D r15 Web Service Apache Axis2 World Accessible Servlet Code Execution Vulnerability Poc

Computer Associates ARCserve D2D r15 Web Service Apache Axis2 World Accessible Servlet Code Execution Vulnerability Poc product homepage: https://support.ca.com/phpdocs/0/8363/support/arcserved2dsupport.html vulnerability: The Tomcat Server, which listens for incoming connections on port 8014,...

Music Animation Machine MIDI Player - Local Crash (PoC)

Exploit Title: Music Animation Machine MIDI Player Local Crash PoC Date: 1/3/2011 Author: c0d3R'Z Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: Release 035 Tested on: Windows XP SP2 EN VirtualBox The application crashes when trys to convert a malformed midi file...

CSRF (Cross-Site Request Forgery) in Open blog

Vulnerability ID: HTB22763 Reference: http://www.htbridge.ch/advisory/csrfcrosssiterequestforgeryinopenblog.html Product: Open blog Vendor: K5 Storitve http://www.open-blog.info/ Vulnerable Version: 1.2.1 Vendor Notification: 15 December 2010 Vulnerability Type: CSRF Cross-Site Request Forgery...